CVE-2024-27416

MEDIUM

Linux Kernel 4.14.328-4.15 - Denial of Service via Bluetooth HCI_EV_IO_CAPA_REQUEST Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 15.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (38)
debian/debian_linux 10.0
linux/Kernel < 4.19.309linux
linux/Kernel 4.20.0 - 5.4.271linux
linux/Kernel 5.11.0 - 5.15.151linux
linux/Kernel 5.16.0 - 6.1.81linux
linux/Kernel 5.5.0 - 5.10.212linux
linux/Kernel 6.2.0 - 6.6.21linux
linux/Kernel 6.6.0 - 6.7.9linux
Linux/Linux < 6.6
Linux/Linux 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c - 79820a7e1e057120c49be07cbe10643d0706b259
... and 28 more
Published May 17, 2024
Tracked Since Feb 18, 2026